You have seen Firesheep, a simple Firefox plugin that allows anymore to hijack accounts of Facebook and Twitter in open WiFi networks such as the one used in Starbucks.
But that is for the PC.
Now meet FaceNiff, an Android app that allows you to do exactly the same thing as Firesheep. FaceNiff gives Android users the capability to hijack/intercept social accounts of other users in a WiFi network including the secured ones with WEP, WPA & WPA2.
The only barrier here is that FaceNiff requires a “rooted” Android device to work and the free version allows up to 3 hijacked profiles. However a paid version allows more social networking profile to be hijacked. For the moment. the app currently supports FaceBook, Twitter, Youtube, Amazon and Poland social networking site Nasza-Klasa.
According to its developer(creator), FaceNiff has been confirmed to work on the following devices- HTC Desire CM7, Original Droid/Milestone CM7, SE Xperia X10, Samsung Galaxy S, Nexus 1 CM7, HTC HD2, LG Swift 2X, LG Optimus Black – original rom, LG Optimus 3D – original rom, & Samsung Infuse.
To protect your social networking accounts, it is highly recommended that you avoid using public WiFi network regardless if its open or secured. If there is a need to use Facebook and Twiter on your PC in a WiFi network, make sure the connection is secure:
As for using Facebook & Twitter on your mobile phone, it is highly recommended that you use your mobile network(3G/EDGE). If there is a need to turn on WiFi, ensure that “https” or “SSL” is turn on in your Facebook or Twitter app.
If you are not sure about this, avoid using public WiFi networks completely.
[Source]- FaceNiff